If your service uses “my” in order to  retrieve certificate it only reads
its certificate (service launcher UserA), you can save certificate for
LocalMachine but your service must  

use local machine store to retrieve certificate and not “my” (personal)
store.

 

Da: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org]
Per conto di Harshvir Sidhu
Inviato: martedì 8 marzo 2011 17:43
A: carlyo...@keycomm.co.uk
Cc: openssl-users@openssl.org
Oggetto: Re: Certificate Access Question

 

I checked this function, its for installing Certificate without User
Interaction. But my problem starts after Certificate Installation, that
certificate installed by one user is not accessible to another user.

Thanks.

On Tue, Mar 8, 2011 at 10:06 AM, <carlyo...@keycomm.co.uk> wrote:

I used PKCS#12 files and CryptUIWizImport with these flags:

DWORD                       flags = 
            CRYPTUI_WIZ_NO_UI |
            CRYPTUI_WIZ_IMPORT_TO_LOCALMACHINE | 
            CRYPTUI_WIZ_IMPORT_ALLOW_CERT | 
            CRYPTUI_WIZ_IMPORT_NO_CHANGE_DEST_STORE; 

and it all works for me.


On Tue 08/03/11 2:20 PM , Harshvir Sidhu hvssi...@gmail.com sent:

Hi,
   I dont think this question is related to openssl, but just checking if
someone has done something like this.
   I have a service that runs under UserA, and my desktop user is UserB.
   When I install certificates using UserB, then i am not able to access
them in UserA, for the obvious reason that personal certificates go in
Registry, for trusted root there is an option to install on Local computer,
which i can access, but client certificate is not accessible.
   I tried using MMC to install certificates for Service user account, but
still its not working.


   Any suggestion on how can i do this using Windows Certificate Store,
another option will be to use certificate as files, but i want to use
Certificate store. Thanks.

// Harshvir

 

 

Reply via email to